Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS147242.roa
File: AS147242.roa (raw, json)
Hash identifier: uYXH5fo/Zola1GN/Bw1b5UjRUE5BOELWdy7eAavw024=
Subject key identifier: 54:91:44:63:80:3C:92:CD:8A:06:37:37:D7:7B:40:16:D5:A1:30:2D
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 28BCF46AB704F4C88B4CCE0C8A5507E0BC409D4B
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS147242.roa
Signing time: Mon 20 Jul 2026 11:34:53 +0000
ROA not before: Mon 20 Jul 2026 11:29:53 +0000
ROA not after: Mon 19 Jul 2027 11:34:53 +0000
asID: 147242
IP address blocks: 140.233.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:bc:f4:6a:b7:04:f4:c8:8b:4c:ce:0c:8a:55:07:e0:bc:40:9d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 20 11:29:53 2026 GMT
Not After : Jul 19 11:34:53 2027 GMT
Subject: CN=54914463803C92CD8A063737D77B4016D5A1302D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a4:b7:71:f6:15:07:72:1e:a8:4c:6d:78:72:
4e:ad:1d:ed:05:73:04:ec:c7:0d:63:0b:5a:81:7c:
fa:a8:74:74:b9:79:a9:8d:ed:f9:30:38:3f:37:39:
3e:02:69:be:f5:2c:7c:e2:f4:43:69:b0:34:3c:f8:
f4:88:4e:22:3c:9f:0f:8b:d2:0d:50:6c:4f:8b:44:
bd:7b:59:b2:bb:21:78:ee:72:ff:e2:00:ff:a3:b6:
4b:70:4d:28:9b:ff:1b:74:25:7c:3f:f1:16:b9:09:
1f:12:d7:43:35:cd:97:8b:a7:b2:aa:64:31:d0:77:
9b:9c:25:1c:a3:58:27:9b:1f:40:1f:77:be:73:19:
d9:80:55:96:6f:3a:9f:52:f0:3b:14:00:82:7d:f9:
78:45:81:29:50:4d:20:37:0b:77:fb:f5:8d:74:d0:
b0:54:8c:c9:fa:c4:27:da:5b:ab:5d:c5:35:3a:bd:
de:80:da:48:4e:14:97:8e:e0:00:6d:05:cf:6f:18:
d4:c8:c7:f1:5b:1f:47:08:ef:6c:26:e4:dc:12:8b:
8e:e9:81:3e:8c:ae:eb:57:0e:75:e6:dd:df:21:bb:
8a:be:54:e8:b5:bc:74:72:10:48:57:24:91:f3:ea:
89:fc:c2:0c:90:9e:4f:30:2d:4a:fb:b9:2c:e2:76:
8e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:91:44:63:80:3C:92:CD:8A:06:37:37:D7:7B:40:16:D5:A1:30:2D
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS147242.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.172.0/24
Signature Algorithm: sha256WithRSAEncryption
05:6b:83:bf:91:67:5e:15:16:ef:d1:2c:44:7a:16:9c:87:73:
33:b5:f4:96:68:d2:6d:e1:16:55:10:95:99:6c:16:5c:65:55:
9c:51:7f:5e:18:e6:61:93:41:1d:74:2a:c2:05:fa:2c:f3:20:
b5:27:67:d7:9d:74:09:34:a0:9d:4f:c0:d6:28:74:84:0d:9c:
ab:66:2f:39:1b:cc:5d:3c:41:36:68:6b:41:f9:c2:dc:2f:77:
19:1d:32:7c:c9:1c:a1:af:61:ed:24:88:fa:f2:a6:bf:f8:2b:
69:73:a2:a7:30:cf:52:73:18:a3:b7:6e:03:e7:8d:4f:e4:88:
c6:41:d3:d8:ab:be:03:d0:38:d1:8a:0d:c4:cc:65:c3:1d:1c:
71:5c:a0:0b:bc:18:49:e5:b3:70:05:16:43:f4:81:d8:90:07:
90:01:78:cd:f0:e0:10:c4:c3:a0:53:15:dc:de:45:2b:14:e9:
c6:35:b1:19:56:38:6b:3e:62:c1:b8:26:34:5f:ab:2b:d3:50:
86:3e:2d:cd:9c:55:4d:83:96:db:25:37:fb:f2:05:21:82:0d:
4f:63:7a:59:7b:6f:5c:ed:6b:d3:9c:6e:7d:f6:fc:09:45:d0:
ce:d9:cc:15:70:6b:ae:ab:ee:ca:f7:b4:08:b0:68:fa:0f:be:
21:a8:9e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:21 2026 by rpki-client